I would also attest that the XF team is always up to date when it comes to fix any security leaks. So that is not an issue at all. One essence I have found here from the comments is that when a software relies heavily on third-party solutions to satisfy the admins' needs it is clear that a switch will be delayed and more cautious. The good thing is that XF1 is working very reliable and stable, so that there is no technical urge to upgrade fast. For me XF2 now needs to prove to be a "better" platform for third-party developers and I will measure it in how sophisticated, stable and fast "next-gen" add-ons will come.